This is an overview of our complete Security infrastructure across all products and all plans. We do have a separate detailed overview of our Enterprise Security Infrastructure within AWS so get in touch with me if you're interested to look at that one too.

1. Teamwork.com
SECURITY OVERVIEW
www.teamwork.com/security

2. More info at www.teamwork.com/security Page 2/12
Secure collaboration on your projects
with Teamwork.com
Over 250,000 companies worldwide in 147 countries trust Teamwork.com to manage their
projects in the cloud - and we take this trust very seriously. Our top priority is to ensure that
your project-related data remains secure and confidential, and we adhere to the highest
professional security standards to do so. Our goal is to provide you with an easy-to-use,
flexible, and scalable project management application with dependable service and
comprehensive security at all levels. And we succeed at this - we've never had a security
breach or lost customer files. To keep our environment secure, we constantly focus on
maintaining the reliability of our product, infrastructure, technologies, and procedures. Our
security model consists of three elements: physical, network, and content. Here's how we deal
with each of them..

3. More info at www.teamwork.com/security Page 3/12
Physical security
We host Teamwork.com within the Amazon's Web Services (AWS) environment. These are
world-class data centers and we make use of their web/application servers, file servers, and
databases. The Teamwork.com system spans several layers of the AWS in that we utilize the
Elastic Computing (EC2) for our application and web servers, and additionally for other file
servers. The file servers are connected to the AWS Storage facility (S3), while the application is
connected to the Relational Database System (RDS).
Key to all of our security measures is the physical security of the AWS data centers. The
buildings that house the centers have significant physical access control, and incorporate
extensive seismic bracing as well as the latest smoke and fire early-detection systems. The
sites are monitored constantly, 24x7x365, by digital surveillance systems.

4. More info at www.teamwork.com/security Page 4/12
The digital security of our system and your information resides behind the AWS firewall, Spam
and DOS protections, and is only visible to specifically monitored IP addresses. In effect, you
connect to Teamwork.com through an AWS load-balancer via the AWS network, so it shouldn't
matter where the computers are. But for reference, Teamwork.com straddles multiple 'zones'
in the Virginia AWS Data Center (a short walk away from the AWS U.S. government servers).
The third element of the physical security of your data is backups. At the AWS data
centers, all the databases are backed up twice a day by one of the file servers and then backed
up to the S3 storage. The RDS Databases are configured to point-in-time recovery, up to the
last 5 minutes, within the previous 3 day period, and snapshots of the Database servers are
taken every morning (GMT). All primary database servers have fully replicated slaves and are
always in sync. The application and file servers are snapshot on a regular schedule.

5. More info at www.teamwork.com/security Page 5/12
Along with the backups comes the ability to restore the data if needed, and our customer care
team can help you with this.
So, the physical location is secure, your data is safe behind firewalls and spam protections, and
you can retrieve anything from the data backups. But what of uptime, the security of being
able to access your projects on Teamwork.com whenever you want to?
Since launching our first product in 2007, Teamwork.com’s uptime has consistently exceeded
99%. Running Teamwork.com in the AWS environment, compared to a more traditional ISP
hosting provider, means that all services are essentially virtual, and so are not vulnerable to
physical hardware failures. Yes, we are sharing the AWS environment with many other
companies, but sharing resources is what is contributing to our outstanding uptime
percentage.

6. More info at www.teamwork.com/security Page 6/12
Network security
Network security consists of two elements that both need to be considered: the security of the
infrastructure itself and then of the data within it.
Industry standard protection procedures for our network infrastructure are an integral part of
Teamwork.com's engineering culture. Between us, we have many years of experience with
protection mechanisms such as firewalled servers and alert mechanisms. But these specifics
are based on years of experience, and a deep understanding of the entire picture of network
security: operations, back-end, front-end, and social engineering. Appreciating the whole
scope gives us the edge in our security measures.

7. More info at www.teamwork.com/security Page 7/12
The other side of network security is data protection. At Teamwork.com we encrypt all your
data with
256-bit Secure Socket Layer (SSL) with the AES algorithm and 2048-bit key length. You're secure
on two fronts as, when you access Teamwork.com, SSL technology protects your information
using both server authentication and data encryption. This is equivalent to the data security
methods used in banking and leading e-commerce sites. And we don't play favorites with our
data encryption - it's the same across the board, whatever your subscription type.
With the network secure and your data encrypted, we now turn to the security of the content
of your files.

8. More info at www.teamwork.com/security Page 8/12
Content security
Content security revolves around who has access to your data, whether it's our staff running
the data center infrastructure or your project team members who you give access rights to.
We'll start with us.
The Teamwork.com team members have years of experience in designing and operating data
centers, as well as in continually improving the processes that aren't working so well or that
can be adjusted to work more efficiently and effectively. Based on all our experience, we've
developed world class practices for managing security and data protection risk. We strongly
believe that designing and running a data center infrastructure requires not just technology,
but a disciplined approach to the processes involved - escalation, management, knowledge
sharing, risk, as well as the day-to-day operations.

9. More info at www.teamwork.com/security Page 9/12
It's not just our wealth of experience that sets us apart from other companies in this area, it's
also our
philosophy of teamwork. We have team members, not employees. An employee is a pawn to
be sacrificed, a team member will have your back. We know all members of our team
personally, and they have the highest clearance to access the data center data. That said, we
also strictly regulate access and passwords to those few team members who need to access
the customer data for troubleshooting or to provide support, and we keep a log of all such
access. And even then, we won't go into your data without your permission (perhaps as part of
a support incident), and into the data center data only on the go-ahead from senior security
management for support and maintenance.
And now about you. You control access to your data on Teamwork.com through user
authentication and user rights.

10. More info at www.teamwork.com/security Page 10/12
User authentication ensures that only valid users can get into your project management
system. Each
user in Teamwork.com has a unique account protected with a password. This account is tied to
a verified email address that must be entered when a user logs in. For additional security, you
have the option to require that passwords be high-security alphanumeric passwords.
Once in Teamwork.com, each user is limited in actions to those assigned to her by the
Teamwork.com Project Administrator through user-level granular, rights and permissions,
settings. Permissions allow a user to perform certain actions and activities within
Teamwork.com, such as adding and editing tasks, or deleting files. The Administrator and
Project Administrator have the power to determine who can do what in which project.
Content security is also about who can see what kinds of data are in your Teamwork.com
projects. Your projects and tasks are accessible only to you unless you explicitly share the data
with someone else in your account, or place the information in a shared notebook.

11. More info at www.teamwork.com/security Page 11/12
And the security of your data content itself should be of concern to you. What happens if you
accidentally delete something, or later decide that you do need data that you've gotten rid of?
We've covered this too. You can safely recover the accidentally deleted items from
Teamwork.com’s recycle bin at any time. And, just in case you've tidied up and emptied your
recycle bin, we keep a backup of the removed data for approximately two weeks. Contact our
customer support team in this period to restore it for you. And, if you delete a user who you
later want to reinstate, we can do that too, along with all her tasks, as long as you contact us
within a month.

12. phone: +353 86 047 0620 | e-mail: emmet.florish@teamwork.com Page 12/12
Want to know
more?
For further details on how Teamwork.com collects and processes your
information, please refer to our Privacy Policy. To learn more about how
Teamwork.com’s service is delivered, please read our Terms of Service. If you
have any questions about the security of Teamwork.com, contact us anytime at
support@teamwork.com and we’ll get back to you quickly.